IT Interviewers answer 


70-410 




WORK GROUP (jjUai U j*j (peer - peer): <*^1- 


DOMAIN ajIc. tjllaj U j*j(Client - Server): 2- 


SAM fileJ^U(Local Control). 



^ jljaJI ISa .. aJc. Active Directory -II Vi p* (server) _Ajt^?. i^SUa JjSj cLua. 



A-Work-group: 

1- All the devices on the same level of powers. 

2- No there is a server and client (Local Control). 

3- password saved in SAM file in each host ha is can easy remove. 

B- Domain 

1- Domain controller controls the powers of all devices and users on the network (centralized 
administration). 


2- Increases the safety and protection within the network (because all database & password 
saved in active directory) and provides ease in dealing with the resources within the network 


? 2012 J jjAjjj Jj jii] dUlkla Jai : JI>J! 4 jU) 


S 



Required 


Processor Support 


64-bit x64 CPU 


Speed 


1.4GHz 


RAM / Memory Requirement 


512MB 


SSO or HD Space 


32GB+ 



join cjlf l fj* Lo; uiliiil ‘LLa.i 

dhep £p L«t manual Lot use r ■ijC'dns -1 

administrator user account Jjjk CP client tP -2 



































1- YOU MUST MAKE SURE SERveses dns server and client is run 

2- in tcp/ip properties you must inter in advanced option and make sure 

check box is true "register this connection's addresses in dns" 

3- when you join client to domain make sure suffix in dns registered 


:£j1 J\ J!>J1 

-la£2 users 10 <Ja*j ^ jjjjil Jja, £>* 


Active Directory ? <J jaL* Jl>*Al 

Users j Services cjla-isJlj Resources a£jAJI a jlj^ <J£i cjUIu »Ac.la o & s j* 

r^Alj ^ill ^ «l j?.Vl &aa decentralize Administration csjJ*=- Aiilk <> 

authorization and authentication -H dLa-X^Li 
AAi at A I' &AA Cjjjj ji Aj^aJ j i jSjJaail (Jji-Zujil ^Uau &Aj^j»a]l CjLa.dll j»a lAjaiS Rule 'CaAi. jc- SjIjc.- ADDS 
S^ill el jaL jS_>all jaisZill AiisU. (j* ^jlvn . ri Domain Controller jWJ' jAs 

j' 

Active Directory is a special-purpose database, the directory is designed to handle a large 

number of read and search operations 

and it central store of all the domain objects & attributes 

or is a directory service implemented by Microsoft for Windows domain networks. It is 
included in most Windows Server operating systems. 


osi layers cs*'-* u-^C-dl Jlj^Al AjIaI 

Lu 9 -jjl jdl j jLu j _ll . ^~'VI A \\ ,_U . jl ,11 I ^ . — - * 1 ' I ^3 A aViA ^ a ^ ' iajjj JaJjuij (jc. ajljc. ^A 

I ^Ic. I g l a oAa.1 j (JS d la u dj\ flda J JaJxajll lAA jjSjj LgjjJ 

: ^ j 

Application Layer(7) 

^_i]l A adail j 4 ,'~ H ^Jl _lj. --.jll -^-al jdl I ^ a—Sail. aj dll a —S ^ Va'i Lj'if j£jjjjj!I ^a A r y a o jLiC. ^A 

j AjSdjll 0^l^)j]l J ‘ ~* , lAnJajIl Aj3 (Jaxj 

: T/FTP, HTTPS, SMTP, POP3, DNS, DHCP, SNMPJ^ 


Presentation Layer(6) 

jjjjia^il Ajti 4-iiaC. ^1 4-a^.jj (jc. Aiju.iall ^Aj 

: Data coding, Data compression, Data Encryption^ 

—Session Layer (5) 

(ja a-j^. l-*l a^yi ^jc. 4-1 ji l n aj (JjaLuiaII j (_J*jj^ail jl^JI jlj^JI (JaIjj - J(jc. Aijhn.aH j 

l_S3jj 4 UaijAl ^jc. o j-a JL-jV! (J^JOLJ (_Jl V aO 1V I ^3 A JUd <0 C 1 1 U I.) ^ ) (jLjUd^Vl 

: Half Duplex = Coaxial Cable, UTP Cable = Full Duplex 
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Transport Layer (4) 

/jjah-v a (J-aauj ^Jua^j (jc- 4_1^1u-ia]I ^Jb 

TCP: Connection Oriented 
UDP: Connection Less 


(3)Network Layer 

<LA£II 4-1^^}] 1 ^jC- 4-1 ji . n^ j A bV'4. A i '1 ^ lr. ^_ill j 4_l3^)ia]l 0 t 'VI . -ViVI /j£. 4_1 j i 

/PJI JSjjjjjj (Jiliiu j <k.jll jIum J-^ai jUis.1 j j^ll Packets J 


f2 )Data Link Layer 

a q*T»11 o4a ^a ^ ~^..■ ^1' J ^ j^oll i. u ^Ilj $ a ^ iI a^ *m A'v*' ^ 

Mac Address J' ^ibjat 5i2a]l si* ^jFrames y2] Packets J ^ C±AEthernet-PPP 


^ A ^ 11 * 1*1 \ \ A^Jjudll ^ \r-, A 

<jjujLLq CjI jLujVI ^J] ajJ 


(1 )Physical Layer 
oul s jVi cjUjIaIIj (3^*^ ^ cJ^ yili j 

jUJI (Jjj^J fti&j cil^LoiVl 

■a.W Uxi^li 


SRC 

y 


7 

Application Layer 




Data 




6 

Presentation Layer 




Data 




5 

Session Layer 




Data 




4 

Transport Layer 



H 

Segment 

H 



3 

Network Layer 


H 

Packets 

H 


2 

Data Link Layer 

H 

Frames 

J 

1 

Physical Layer 

Bits 

010101010101010101010101010101010101010101010101 



j ! 
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Open system interconnection is used for data network design operation specification & 

troubleshooting 

7-application layer: 1- Provide the means for end to end connectivity between individuals 
(user interface). 

2-Deal with network application such as http , ftp, smtp. 

6-presentation layer: data format (encoding & decoding & compression & decompression of 
data) 

5-session layer: used to organize data exchange: establish & manage & terminate session. 
4-transport layer: 1-do flow control 

2- Error recovery & correction. 

3-network layer: 1-find the best path to destination 
2-ip addressing 

2_data link layer: 1-find the best time to send data. 

2- Error detection. 

1-physical layer: describe the mechanical & electrical & maintain means to activate & 
deactivate physical connection for bit transmission to and from network devices. 


^ J-ajj LAYER 6* ^ 

1 _switch: 1-operate at data link layer each port has its own collision & all device in the same 
broadcast (switch know mac address) 

2-router: operate in network layer each port has broadcast & collision domain. 

router regenerate signal & manage data transfer.but router do not pass broadcast 


LAYER £4* Ja I 0*^ Jl 

Some of switch can work in layer 3 because it's know ip address 

AjiljJa! CAjUJ 

(jCr (J j£j j 4SJul (jjjSll (jc- SjljCr 

Data Link Layer-^ 2 4_L^aiLall 4 _a1c. ^ 

Aiflall (J-AAJ djLujjJjJOll! (jl - 

-j via ns J' .LjjI] ^Vu > ri 3 

cijlifL J] ij '^\j Multi Layer Switch ciilb ^y \jy ±\j- 

Load Balancing jj ^g j SjjiiS ciabab'N’ujJ <1 j ajuLoJI 4j aqa ^IcJ 
bLaJC-1 4»i ^y iyi aijjuail 4 K y LaS t> HTTP/HTTPS 

La I- 4 juI^)1I 4 ^ 
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j SjjjS CjIsLolaj 1 g j ^jc. SAjaj C’rtSuull aAA <jjSj A2 j CiISum!! JaJjll ^AaJLaiJ jlg_^ (jc* SjLc. Aijanllj 

Switches ^ Jj^ c3^ ^ j^' j Network Layer ^ ^ ^ j3^j 4^^' g^ lU*^> 

create a network & Routers Connect networks 



£uitilt J!>A 1 AjUI 

Uflu UUDP/TCP 


Transmission Control Protocol-1 >TCP 

4 j\aC« ^ja ^)aJjoiJ ^JjoiLia JaUjj] JaJJjJ A^UaII ^ Ia& ^IaA*U*iI Aic> 

cAIIa! 4_)3^a j ASAj CIAa^LlaII g]j Ajjj^Iall oA^_i j (jLoi^jVI 

aSLiII ^ aLuj^aII CIAa^IxaII AjSI^a (jc- (J ^±uia Aj^) j jjaa^II ^Jc. r L -1C- (JSjoiJ AiSl J SaIc> AjLoJI ^1a& 

^jlS (j] j aIujjaII JjL, jll jl Sent c: a1Loi^)1I c^LjIj (jl ajV (JjIajVI g)^L^ ^ya aIL-j^) JLoijI ^ya p 11& A 1 * a 1 JllLa 

(jLu-iaJ JL-jjj aJjjoij Igji (j j I Jj^)j]l (jl J~ 1( ~- ^3 »1 laa .l^jJ Aji_] 0al_j^)jil t^jlc- 3^l_J 3j^l]l (jl yr. ^3 pi UA i^IUa 


User Datagram Protocol—! jU-als.] >UDP 
Cli jjjVI 1 ■*' ‘ ^_3 L^flllaJ j CjUIu (Jjoj^j (Jl ■ ^*‘<VI j^a p^j]l 1 jlji) ~A ' nl i 

^ ^ a J ‘ aH (jl jA aI£ j 
J ■ Ai (jl (j JJ ^ ■ A ti jyt- A_lSJ j |^jl jlg^Jl ^ 1<~- C-i . ' r - J£^J V (JUal^jVl (ja p ^j]l l^A 
? P^mI La^jl (Jjkj j (JUaj LLl^. 1 jj^l (jaS^Jall (jjj Alwi^a aJU-j^) <J£ ^ic- 3 j£Ij (j jjj (^1 J CjU-ail AaLoc. J'Jia 

1 UPD Aja-i-all Ajla.)/li 


Tcp : 1-connection oriented protocol. 

2- Establish session before send data. 

3- make recovery & control. 

4- error detection & correction. 

Udp: 1-connection less protocol 

2 - error detection but not correction 

3- no control. 

4- no session 


^wtljdl Jl j^ull AjL^l 

; ^-A dil^jjuill 3 j y pl^jl ^_j ^)1 

LANs a j u ^ cij Kn tilli. 
MANs Cj14^I2. 

WANS A*joil^ll (jJalxall ^'1<,.T,3. 
Internet^j>j^l <^, 4 . 

groupJlj ou Cm Jjj^l u :iio< 

Ou : is a container object ( user & computer) within a domain that you can use to 
consolidate users & groups & computers & other objects & foe delegating administrative 
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rights & also for linking group policy . 

Group : some of users we can collect them in new object this object named group 

ls * j users -computers -.etc Was Aala. jaJ jiil ^a -LjMj SjLc 0 u 

j group policy hr-it -sales etc ^ ^ JS u»a UJa bj ^jbl Aa.lj JIa 

delegation control 

j\ ^ > All < t I J <c- jaz a b).:^ ' AAt ^ja Ac.^ ^ object 0^ a jbc. ^A group L«l 

share and permissions^ 


Ugia ujjjt j dlJja £>e A^aliluib ^ISjj ipv4/ipv 6 Cm : 12t>“ 


us 


lira 


Source aud destination addresses are 32 bits (4 bytes) in 
length. 

IPSec support is optional. _ 

Address Resolution Protocol (ARP) uses broadcast ARP 
Request frames to resolve an IP address to a link-layer 
address. 

Internet Group Management Protocol (IGMP) manages 
membership in local subnet groups. 

ICMP Router Discovers- is used to determine the IPv4 
address of the best default gateway, aud it is optional. 

Broadcast addresses are used to send traffic to all nodes 
on a subnet. 

Must be configured either manually or through DHCP. 


Source and destination addresses are 12S bits (16 bytes) 
in length. 

ffiSffiggpott is required. 

Multicast Neighbor Solicitation messages resolve IP 
addresses to link-layer addresses 

Multicast Listener Discover:: MLD: messages manage 
membership m local subnet groups. 

ICMPv6 Router Solicitation and Router Advertisement 
messages are used to determine the IP address of the best 

default gateway, and they are required. _ 

IPv6 uses a link-local scope all-nodes multicast address. 

Does not requue manual configuration or DHCP. 


Uses host address (A) resource records in Domain 

Name System (DNS) to map host names to IPv4 
addresses. 

Uses host address (AAAA) resource records in DNS to 
map host names to IPv6 addresses. 

Uses pointer (PTR) resource records in the EV¬ 
ADOR. ARPA DNS domain to map IPv4 addresses to 
host names. 

Uses pointer (PTR) resource records in the IP6.ARPA 
DNS domain to map IPv6 addresses to host names. 


PowerShell ^ get -sconfig.cmd j^IjSfl J*-* C*\ 13^ 

Server Configuration tool (Sconfig.cmd) to configure and manage several common 

aspects of Server Core installations 

^ull ^JJ&I LfrSj^la ^ ^ dll jAl ^ r - J ^ V A I ^ J 4 A dll dl J* bn (Jdu J^JI ^a\ 0^)b& &A 

jljjjj jS (j aa jaII ^ a a ja. jMI (JjJjjSjJjjiII (jSanjl d£ djjJu (jc. SjIac- jjj£ dl 7.1-.j jajiudl 


^jll JjSjjjjjII jwil jaUj tfjjjij ^active directory ^uil 

active directory 

( new technology directory service ) jb^.' ^j bjliUJI sac li ^'Ntds.dit 
(c:windows\ system32\config\ntds.dit)jC^' ^ ^ 

Idapj* ls’CW JjSjj jJI j»^lj 

( Lightweight Directory Access Protocol) 
3268 db^L^l] 389 ^j d jjJI J^dyLDAP Jl 
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sysvol 15 lh“ 


The System Volume (Sysvol) is a shared directory that stores the server copy of the domain's 
public files that must be shared for common access and replication throughout a domain 
It's for permission & group policy 
50 mega 


active lull 's ^311 ^aL^I install ^iael ^ 2012 jSjj*« ^ :16 o* 

directory 

50 j clAjLull Sjcla] 200 ' 250 AD 0°) duU 1 32 0^ aS^.1 ■ ■■ ^ j^Ia ^Aic. (jjfLj ^jV 

SYSVOLJ 


GC J i7o< 

gc= global cataclog 

Global catalog support queries for objec 6 ts throughout the forest. 
Forest^ "object" Cfi- 3j 1 jl diLajLt« ^jjsj 4 " diUlu s-ic-la" (jc. SjUc. ja 

i.*' 1 ' A^lj .laJjjj (jl L-L&J (JaVI (J1c. (jSl 1 ISa jjjsu ‘ j ti< 4JJ QQ jA jjJ jjjjjS (jjWjJ (JS 


active directory partitions jluaHU; 180- 

‘Ca^o A_i] (_)£ Ajlj jI ^c. 3^)Lic- ^A 

j User Objects j Computer Objects t> u^jd' ^ <_£ Jc. domain partition : 

Groups,. 

Attributescr 4 ^ <1 *diUj£JI sSa <> <jj 


Configuration Partition: 

ditsjjjajl L-iajijSites -II dibl^c.1 (JiLa Active Directory-IU \i dibl.ic.VI 

Domain -I' <&£ J! ^ ^ <ii <jA Partition -II li* j -cia UjGIjc.) jj Jp-L ^jSj csj^Vl 

Forest.-!' ^ »cj^jJlControllers 


Schema Partition: 

First J! User Name -II ^ Attributes -II j Objects -I' ^ Schema -I' 

V Group -M j Last Name jName 

Domain -M j Schema Master j Domain Controller J J j 

Schema Partition c> .Lia o*lj£U j^VlControllers 
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4- 

Application Partition: 

cjl Active Directory cjUUj ^Vn a n J j4l L )^u\ j ^jUi^l Partition ^ 

IgjULj 4^Vnan 

ci Domain Controller j Replication -M ^ Partition -M ^ cj I^LrUi J 

e lg_La (_5^ j) diULnll ^ic. 

(jl AaJ dlj^l ^jjaJ 

Schema Partition 
and 

c> jj f^-^^Configuration Partition 
parent to child and tree 

c-loi ls^ common Cy &jW 

^_1£ ^jU 4Jli additional <1^ es* ^ 



active directory partition 


c:\windows\ntds »>200 mega +50 log file 
ntds.nit «<database name 



domain partition 
configrution partition 
schema partition 


>>;i> user's-computer-ou-containef-printer list in diri 
publish it in ad .group -contact 


»> it is respose for replication between sites 
GC 


»> classes write information in ou-user-.etc 

>»attributes properties for class 


aDDlicatiOn oartition >;>>>> OWS 6UT IS OPTIONAL because If your AD not 
^ " mtgerated with DNS it Is not 4partition it became 1 

partition and reverse is true 



administrator=sid”!>00 you must change the name of administrator 


gmgi.it 
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domain join 34* Jj' : 19 lh 

domain controller J'j domain u£ :20u- 

La I i IajjJU 4^n*t\l g^Uj (jjUaill qia jJllI 

4_ilc- C t t}**ixti*i a j jjAbj 4_iic- (JjU jl g y\\ j! 4_iiSLa]l j& ^)1 jjfii jS (Jj-q 

<_£jj3£jjta I + jSJjIjoi jjAlij A_i1c- (JjU jlg_^J jSjjLoi jj^j 4-iIc. l) jlg-^ (jjjS <j£J 

stand alone 4 -*-^ lh ^ ^ 

group distributions Jtj group security u£ *M: 21o* 

group scope CP 22u- 

^ ^" U * A 100 ^ Ul jl 10j9 UMa : 23 l>* 

LSb ^^jTRUST f4^3 300 ^ SjAtUl ^iU £j$j 200 ^ 

CjL^tua ^JjJl j ^ J tjjiJi j-uu £l> uj!j AjjULuuI ^ ^iJl <jAUl Jjlx- SjAlUl ^ 

23-22-21 fSj 4±Lu&l ^jU! 

*Lujjj3| ^ 


fndnfor* »> WiptMibirfroln, 
this fanfiil /ini All trujtwf 

flWtn* lOCal 

rtfrwrteJ > > > /10*5$ rtfrorttf frfa 
this itfn/Un mlu 


tnefaPM > > /uatrt iMfrwr m* 

it Mn miv global 

rtimW) >» /urn* ftfwrttf 
fnfa this im Itn /Ini Ml itfn/ltn 
tmJ&i 

J Oltllllllllll'ifci 4 JU AJy'J ji*V J" universal 





scope 



Groups 


security 


distribution 



sj- 

^10 user in isi.com 


isi.com 


30 user in x isi.com 
40 user in TSOFT.COM 

jj^j data 

JiTSOFT.COM 



x.isi.com 


TS0FT.C0M 


UudiKtwjt.m 


J* J«U i-i* resources > t£j '»ji« 'i»j 
exchange server ji ^ 

authentication 


j* jj 3 ' el mails M *ft' 
authentication 


Jji jjii >1« jjil ui 

Jbh w ^ 



-local 


global —-global 

global-universal 

global-local 

universal -local 
universal—universal 














































SID j^La :24u- 

security identifier:^ 

A security identifier (SID) is a unique value of variable length used to identify a security 

principal or security group 


Vj ad ja 

administrator^' user^-iic, jl 

(J A AaxJ 4.1 Jaxj j CliULnll ^_usju1 (J-aC. j 

cAlj j j p w‘uj^A j C—iila 

administrator^' j' l-ajc. li 

accounted Delete ^juia (Jaxj cj' JalLail li 
administratorJ j* user account <_U^ j 

1—1 lui ljl_A 

o^ajauAl CllliLall J-vVn (Ja SID (J' (jjSj t —Sl> 

AjUV' 

SID J' ^ jLSilc. 


Sid ‘_ SjjaJ (jljuolcr A-Isj^Ia 

SIDd' l5jj ^ c* 2 ^' j run ^-^1 

Whnami /ikpt 


rest password<_UM ti«a jl j 

^3^)11 lAA ^axjj <—a jjuj 


^jjjj aIaC- juall V' ^ aIaII lAA ^Ia.jI £l lal xti j V (^JxjuiII dj^o ^JUJAJ C. ^ jujj (JaC- A^. jj AaIA A_la jj^Ja 

certificate cW^- uj^jj J^' a^U^ aW^ jJ V' j^£l' j' j^j a^ admin Vj 

server 


<Jj J JJJri 300 active directory AiAl duji«l jjtej USER 300 AjS £ja j &> :25u- 
IT 10 ACCOUNT 150 HR ^ jjjj 50 t/VU GROUPS »j»j OUS ®j* 

MANAGER 10 SELES OUTDOOR 30 SELES 50 

Dsadd user cn=George.samuel,ou=user,ou=IT,dc=ww,dc=com -pwd P@ssw0rd -mustchpwd yes 

child ou &primary ou ^ M 3 user's ^ j^V'^ jjSjj 

^jjojAII ^jC- aA^ILuia AiljAal A Aj£ aIxJJ lj^C-,3 Vj' 

open »>cmd 

dsadd user cn=george.samuel, ou=user,ou=IT,dc=ww,dc=com -pwd P@ssw0rd - 

mustchpwd yes 

^jjojAII £jC> x jia AiLjal A jS aIxjjj JlAA 

AiLjal a-Aac; ^cjs ja! jl aJI*AI ^dsadd user «< 

^jen =cname 

ou J' oM^ uj^ JjV' ^ clA^j sub ou ci' child ou J' L 5 ^ou=user 

W' JJJ^' C5^' OU L^jOU = U 

^ajail L-JjSjj IjAjDC—^\A/W 

1 ^ jjSj S^)a (J jl L<A t^AS (jjaUll jjtc< ^jjujLAI Ia^xj <.. ilS j j ^jjjjoiLAI IaLIxa j-PWD 

^xj ^ ^jjj^' u' ci*^ C5-^' ^aUxa j-MUSTCHPWD YES 




















AjLLail! 

^^suffix Jj(>j primary ou /sub ou j* ^ j 200 

for /L %i in (1,1/200) do dsadd user cn=user%i / ou=user / ou=IT / dc=ww / dc=com -pwd P@ssw0rd -mustchpwd yes 


super jAl-aj public IP <J'j private IP 6w ADDRESSING y® CLASSES £'jj' :26u- 

netting 

IP classes 

1- class A: first octet range: 1-126 

2- class B: first octet range: 128-191 

3- class C: first octet range: 192-223 

4- class D: first octet range: 224-239_Reserved for Multicasting 

5- class E: first octet range: 240 - 254_Experimental; used for research 


Public IP addresses 

A public IP address is any valid address, or number, that can be accessed over the Internet. 
Internet standards groups, such as the Network Information Center (NIC) or the Internet 
Assigned Numbers Authority (IANA), are the organizations responsible for registering IP ranges 
and assigning them to organizations, such as Internet Service Providers (ISPs). 

In the Cloud (n) system, a public IP address is an identifier assigned to a virtual router on the 
network. Any resources that will be available over the Internet will require a public IP address. 
Public IP addresses can be added in the Cloud Console. 

Private IP addresses 

A private IP address is any number or address assigned to a device on a private TCP/IP Local 
Area Network that is accessible only within the Local Area Network. For a resource inside the 
Local Area Network to be accessible over the Internet, a device within the Local Area Network 
must be connected to the Internet with a public IP address, and the networking must be 
appropriately configured. The same Internet standards organizations have reserved the 
following three IP address ranges that will never be registered publicly: 

First IP in block Last IP in block 
10.0.0.0 10.255.255.255 
172.16.0.0 172.31.255.255 
192.168.0.0 192.168.255.255 

A private IP address is assigned to each instance created in the Cloud (n) system. Consequently, 
each instance may only have one private IP address, and additional private IP addresses cannot 
be added. 


Super netting, also called Classless Inter-Domain Routing (CIDR): is a way to aggregate multiple 
Internet addresses of the same class. 

The original Internet Protocol (IP) defines IP addresses in four major classes of address 
structure, Classes A through D. Each class allocates one portion of the 32-bit Internet address 
format to a network address and the remaining portion to the specific host machines within 
the network. 

Using super netting, the network address 192.168.2.0/24 and an adjacent address 
192.168.3.0/24 can be merged into 192.168.2.0/23. The "23" at the end of the address says 
that the first 23 bits are the network part of the address, leaving the remaining nine bits for 
specific host addresses. 

Super netting is most often used to combine Class C network addresses and is the basis for 
most routing protocols currently used on the Internet. 
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SUbETTING jjtpj 20 j ^LuoS! 5 ^ 27 lh 

CALSS C t#a Jii&U U2I 

5 DEP 
20 users 
2 A H-2>= 20 
2 A 5-2>=20 

Then new subnet mask is 255.255.255.11100000= 255.255.255.224 

Then the 1 DEP 

The network IP is: 192.168.1.0 

The first IP: 192.168.1.1 

The last IP: 192.168.1.30 

The broadcast IP: 192.168.1.31 

Then the 2 DEP 

The network IP is: 192.168.1.32 
The first IP: 192.168.1.33 
The last IP: 192.168.1.62 
The broadcast IP: 192.168.1.63 

Then the 3 DEP 

The network IP is: 192.168.1.64 
The first IP: 192.168.1.65 
The last IP: 192.168.1.94 
The broadcast IP: 192.168.1.95 


Then the 4 DEP 

The network IP is: 192.168.1.96 
The first IP: 192.168.1.97 
The last IP: 192.168.1.126 
The broadcast IP: 192.168.1.127 


Then the 5 DEP 

The network IP is: 192.168.1.128 
The first IP: 192.168.1.129 
The last IP: 192.168.1.158 
The broadcast IP: 192.168.1.159 


dhcp j*'-*: 28o- 


Dynamic host configuration protocol 

(_j! Jla in.Il 

IP address 
DNS 

Default gateway 
Wins 


dhcp server & dhcp client ; 29o- 

Dhcp server number of port 67 
Dhcp client number of port 68 
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Failover : 340* 

fconfigurations o^ dhcp 2 uj%? cP' dhcp sj^fail over ^ 5 ^ 

1 downtime ^ (jbllc. ci^jll ^ <j£Jj 4_11 aj 


iilij IjLaJj dhcp CjULj s^li JaLual 4JLj]a du Ja ; 35o* 

Igil (. £ij^laII 0^° J ^Julalll lx aIIj lax■• >> L&LIxa ^jjjoIj dhcp CllULlJ SlC-lS lax■>lal 4 jjj^)la Ixola AIIuA 

^gj2jll <jj£Ia (^ill 1 j£lli 4 oI£a JjAaSJJ L ' Q Ia (jjjJjui^Vb 4 _AAj^^aJA ClAlLlJ 

^1U Ij^a. (jiij 4Jj^i 4-1^4 <^111 j 4-1 jaI cjillj dhcp £_bjaxj ^glc. database 

cmd 66 lj£ll Sj£ill ^glc.j ij£ll ^iliLa (Jja dhcp CAc.llL (^^jjixjdll 1 jaajj 


jetpack c:\windows\system 32 \dhcp\dhcp.mdb temp.mdb 


lease duration CP ^ : 36o- 

^ajkj olAa^all Ojliill (. Aj^all dlij^l^ll (Jj^a^jLo Axjj dhcp (Ji O 0 t&A^LiJ ^gll dllj^l^li dlill^C.1 ^)axJ l*a.Lojj oAaII 

jiaJ ^Vn»jclient o® cj ^1 -iljip j 4 f*j %50 ^gij ^bl 8 AjjAaljiaVi saaII .. AiWill 4 i\l^ Jaxj 

^gjtj AaJ <Crbjjp (Jl ^jjjIajjj CAa ol jlg_aJl cJ Axjj % 87.5 


reservation & exclusion Cm <ju*lt U : 370 - 

Exclusion 

(jilgc. jjjLo dhcp cJI tjUic- JAaj iiljl 

reservation 

mac addressJ' Cf- ^ 4-* j* u^- 1 j 44 op-* ^ ^ j 

dhcp <JW ^‘^'database Jlbackup restore <y> U; 380 - 

4_s\ blbll jl£-o AjAaJj backup ^ C5^ lP jdhcp Jl 4-ii (CL 

4j| blUll aj 3 j^gll cjAaJj restore ^ajjjaill (^ic. jiili j jjIujjj Jac. 


multicast scope 390- 

multicast scope »> vedio conferance 


? J-*j 4aiilaj ^Ij dns 40o- 

domain name system/service j* 
resource locator 

Ja.lo^l t> j*lu jLUc name resolution j 

Machine cash - run »>cmd»>ipconfig/displaydns 

Hostsfile c:\windows\system 32 \drivers\etc 


Dns 



























1. Local Host Name 


2. DNS Resolver 
Cache / Hosts 
file content 


3. DNS Server 


7. Lmhosts File 


6. Broadcast 


5. WINS Server 


4. NetBIOS Name Cache 



A m a Clil jijjLoi]! .liAaal ^Vunj 4 jl'sall j Cjlg-ijul Jl eL&juil qa (Jjjaal ^AaJLaiJj 

!^liLa £jltjlS (JjjiaJl J (J* 

u' Jl C5^ ^ ^ 

Aj uj ^ l_a jJjj Clil£A£]| Iajj 

localhost J i -sjAj (>j 
a^aJoII c!jj£j DNS Server J lilj 

DNS Server J ^ ^ 
zones J <-ajAj 

forwarder J'<-* j -A 3-A^VI ^3vn>n lj| 
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recursive &iterative Cfi query j* U; 42a- 


client 


Local DNS 
server 


Root hint (.) 


Iterative query 


Ask .com 



Recursive 


Lj j (jfi iS i Cj^ l—lllaJ <«—(jl jA j 

(jc. 4-A-lj aLqIS CALq^IxAuj VI lWh jl ■■ ^IkjLo (j-o V jl I.AA ^jj^I 

( AjIaVI if 0 <-S<-4^ <J-a ) CAl^lSlI 

Iterative 

Clllj!ylS]| (Jjl AJl^\ Aa .j Ikl ^IxiuiVlj ^ajL jSjjljoill jjli jSjjLoi jjl ^aII AA^ ^!>l*Aail ^ASJ CAL^lSlI LgAjC. jAj 

(uijt^ <ji* dj| uijte <ji* >A$ cr^J^ jl) yr^ J3j! ^a g- 

^j^j V Ulj c!ll jLj uj*jUL yes /no *“““ Authoritative 
^3 ^jjAILq j\ ^3 -I AjIIaII caI bo I j <>_ ^^>*-3 balj yes 


non Authoritative 
forwards 
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o<l O' 0£^> Wla cr'^dns Jforward Lii jl 

local 'j* <^'j ijC.'jj <j-' O' t$^' £&h 'jJjj Recursive 
Recursive 'jJjj Oj^ dns forward da dns 



dns (_£ zone £'jj' :43 u- 

.^j^I ^ Master ^aj Primary Zone: .1 

^ cj^ JaLn^.l£ a_^ ajjjIj j Secondary Zone: .2 

Zone Transfer.^^ Primary Zone c> gH^ 3 l&A? V .y^Vl ^uill 

NS^^^lU^j Stub Zone: .3 

JaiaJ tgiV UjLal tg iS\j jj-o^ ^ bjajl AjL^aVi ^-kjoull ^j Integrated zone : .4 

gSjjjjjjb g_fljj£Vi CIjULij <J^.b 

J\ Jx^ aLjL c j£xu J reverse lookup j' forward lookup gUJI DNS 5^^ 

;l$ijj*j c-UisiZone 

|p C 5 ^'j^' ^j^Forward Lookup Zone: 

^jujI jUj) i-jjlLuillj iLjk« |p o'jjc- Oj^ O^Reverse Lookup Zone: • 























Zones 


zone J* <—»ijj^ j ^ ^1 £j ;44lh 


Description 


Primary Read/write copy of a DNS database 


Secondary Read-only copy of a DNS database 


Stub 


Copy of a zone that contains only 
records used to locate name servers 


Active 

Directory- 

integrated 


Zone data is stored in AD DS rather 
than in zone files 


dns record :45 <_h“ 

jAj Zone. ^ -Ma; ^ Start of Authority ^ SOA: • 

Zone C’^jIaC. jJ I j 6(JjjjoiaII /till j ^)Sjjjai]| ^joiI Jlo AjjJal^)jaVI 

Secondary Zone.j Primary Zone ^'Transfer 

jjjU^ jl www.google.com A^ltfc-VI ciujliVI <*ilHost record >j A: • 

pci.domain.local d ls* 

j*L a. lja^ll( Zone -^1 £c>) c5j^Vl cij|jaj^l pIajJ Cx^j^ j Name Server d NS: • 

DNS. 

4^ ^ a. cJ^ c^V Alias. LjaJ cr^ j Canonical Name ls' CNAME: • 

^. http://www.domain. com ^jj^VI webserver.domain.com a^J jaj^ 

A_ilcr sjIxIa]! aJ CNAME <jSaj 

jLuiaII Apaji <J^I <jA I^a (jc. jL*iiaiVlj ^jjjSiyi ajj^I ^aUjj Mail Exchanger J MX: • 

abcde@gmail.com <j'j^l ^ ^ .4%^j J! Ja£L«j u' yA jj^V' J 

fl. Wloa b Aj <j-aLall IP (jljjc- J] JjLai jl I A^.jj ^aJ cl>«jgma i I .com J* O-alaJl MX Lp ClLaa]| ^aJJ 

SMTP.Jj^jjjjj 

cjji ^1 jUaill J) SjU£U reverse lookup zone ^ JaSa Pointer, PTR: • 

^ A.J> cJac. (j^Sc. ajI^ ic. 

cr^j . A-^»t^l Active Directory ^ Service Location J SRV: • 

L-njull Ij^J .CjLjAaJI ojiA ^aJiij ^^ull sj^.VI Q±A jjill ^ SjajiAllservices ci iLoa^JI ^jjj LLjj <Jasu Cj!>Lauai 

l^ijj*j pUjI j .Aju> V il cJ^A? DNS Active Directory CjIHL 

Cimi t_s^( Domain Controller J J c-t^jlj DCPROMO ^1) s ja JjV 

.DNS 
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nas &saruD*> storage j^jl; 460 - 


SAN 

NAS 

It uses Fibre Channel 

It uses TCP/IP Networks - Ethernet, FDDI, ATM 

Encapsulated SCSI 

Protocols used - TCP/IP and NFS/CIFS/HTTP 

Just the server class devices with SCSI Fibre 
Channel can connect to the SAN. The Fibre 
Channel of SAN has a limitation of approximately 
10km 

Almost any machine which can get connected to 
the LAN (or is interconnected to the LAN through 
a WAN) can use NFS, CIFS or HTTP protocol to 
connect to a NAS and share files. 

A SAN addresses data by disk block number and 
transfers raw disk blocks. 

A NAS identifies data by file name and byte 
offsets, transfers file data or file meta-data (file's 
owner, permissions, creation data, etc.), and 
handles security, user authentication, file locking 

File Sharing depends on the OS and does not 
exist in many operating systems. 

A NAS permits better sharing of information 
especially between disparate operating systems 
such as Unix and NT. 

File System managed by servers 

File System managed by NAS head unit 

Backups and mirrors require a block by block 
copy, even if blocks are empty. A mirror machine 
must be equal to or greater in capacity compared 
to the source volume. 

Backups and mirrors (utilizing features like 

NetApp's Snapshots) are done on files, not 
blocks, for a savings in bandwidth and time. A 
Snapshot can be tiny compared to its source 
volume. 


dynamic desk & basic desk Cm Jb^' Cm: 47<j- 


Basic Disk 


Basic disks are the storage types most often used with Windows. The basic disk manages 
the data by primary partition, extended partition and logical partition on the disk. In 
Windows, the basic disk can have four primary partitions or three primary partitions, 
one extended partition. On basic disk, each partition is an isolated unit. Partitions on 
basic disks do not allow us to share or spilt data with other partitions. 

Dynamic Disk 

Compared with Basic Disk, the main character of Dynamic disk is that dynamic disk is 
able to split or share data among two or more dynamic hard disks on a computer. A 
single dynamic disk, for example, may actually be made up of storage space on two 
separate hard disks. Furthermore, dynamic disk can copy data among two or more hard 
disks to prevent from the chance of a single disk failed. This function improves 
reliability but requires more hard disks. 


fat32/ntfs Cm <jb^' :48o- 


FAT32 

1 " A a-ia. 2 (> CjUiuid]- 
tluUUaa. 4 < ‘sLq1\ (jl 

yCP 1 g j ^ /ji j j Qg jj dj* ‘‘.Vl ^Liaj 

NTFS<Ux J! Fat32 ^ Cm 
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NTFS 

New Technology File System 


XP & NT & 2000l jx j Aollxll Ad jdill cil*judll j ciliixll ^x j <2dal 

1 g » x j^lxlstlllj jjill jjx.lVunxll ^)juj AxlS IglUaC-lo j^juj jjjklll aA^.j ( ^ic. Al j-sjl dllqlxll ^)jSI jjxll ^d- 

dlUixl! ^jdll jj^)Ja jc. ^»Aslx jdxll j jLuox ^AJJ jl 

jla (admin) jWlI ^iillxS till a. idlL Encryption file system dlilxll jdii Jlx I gSVixj ^.lll jxVI j- Vi l jaxjj- 

.dlalxll oAA ^-JajjuoJ jia til jlg_a. o_fl jjuj jill ^kVI ^»Adjaixll lx I j^)3 A^J 

AjjuuIIj Aj^ld j 2fa\ Adjaix ^9 dlilxll jj jd ^Ic. Al^)All till! j jj jdll aA^.j jx A_dlxll CidLuaxil jjJaSi ^lAalxul ^d- 
fijdx (.“4 aU\ 

FAT16 & FAT32±LU I <2dll jx ^icj Li-a*J ^jtg-ll (J» *> J- 

Ad A*lldall Cilflixll *dl*Jjuj| A *iSxj IxS Lg_^.I>da] j £.Ud.Vl Aj3I^)x A "i^xj j n-\ (_£^kVl ^xlaill jx (^Jxxll 1^)1 ^)Hjuj 1 jsi. 
# Aj^)IS J djAa. 

Aoic- (jj-Nxll L_alxll <*judl ( ^ 5 J^a3l Aa. A^.jJ V- 

FDA732 ftkj Jl NTFS jx jjjdill ciIa^j f jl dL»j V- 
(jUaill li& £x (2-al*lll jx jSxJJ (jl ME) jl 98) isl^ill ^iaj jl AjjJC- jx- 
win Nt, 2000 J win xp pro -da lU*a j wifi x/? home lU*a V All jl ajjjc. jx_ 

Floppy Startup A-j>xl! i_$j )Jail AlljJ^i ^lAidd a 1 a t oj <dxa 111 t t inKH ^x <2 xI*1j jl NTFS ^ ^ y jj jdill did j ~ 
Disk 


For infrastructure Active directory database must be on NTFS partition only 


logical oj^»jU (Ajprimary AjAjIa £ -LM < j ^ J 1 : 490 " 

logical 15 SCSI ide/sata j logical 63 j primary 4 


extended partition VI Ija <jI :50o- 

<jl jc. J>aUij 4fSj ikbj logical partitions u? y^ j-^ja j' ^ j Cf- >J-p- j* 

oAij 1 !' dj 2 j 5 j A ^.logical partition dj^jprimary 


ii 


10 11 


12 


L 


pnrnars' 


4 Exfeiided 


^uujlL ^wa jaII V ^1 JJLiuj ^Uaj Jjjjjj 4 auaVi jjJaluul Ja Ijjj 3 Ijbt jl Jjl 2 | lid ; 51 lH 

GPT <^l (> JjV <»*j 

refs (resilient file system) 52o- 

lOlilall j.Lkj ReFS (Resilient File System) ^Ajl 4 jJj 1 j( jj^3l toULill ^Lkj jl 

AAdlxxll j AaIL^JI. 
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jjllj Udc. Windows i> ^ Apple ji jU:£U jd_d U Jjl jli Apple ^ 

A^alaji (Ja .jujj Ldiij Windows 

A-^lajl (_£j^k<a Aji.j ^3 131 WindoWS dlULnl] * ■' Adb (J^.1 (y a Adal I &3 a jaJ ^xaLd&l 

^<a J^kS jl AjuoLoi]| di^k. <-_fltsjU bl13j; 

* ^U£jjLaJjjl/ 1*1^ (jLajJa j bjULnll ^AC-d 

* j Aj^laxdl dlbLnll g.1 t->A*Sfl AjbaaJl j 

* dlL^LuLA ajJa djULnll 6^bl J c-IC'JJjujI j tdua. ^y a dlbLnll £>a ^Jc-i Ajj^/a j 

£ j^l 

* 6 jxalL djULnll <- djj^aJ R-\- trees dlljjdudl aAAxda l g AC- ^ j^)3 J (J Jj^al (Jddj dal lull L klL^aJ ^du j 

^CllliLall ^aliaj i^y* C5^] <-}k J kudJJ ^idal ^' j (J£jA Jj AjjulJ LaJ^ 

<*-* a^.^^I c. jjal jj J! AildaVU NTFS o^' cs-^ j$*( NTFS) 

u*> U J^bl! jd-aj V Ail V! A^FS J FeFS 

^Iajc-I jdxj V La£ ReFS ^ o- 3 ' j*Vl ^ J i> Removable Storage. 

dll^La ^pa ^j^axJ J NTFS L$^ adixx ^AC- ReFS /(J!L<a (EFS), A_^Loia]| uufla, diaj J ^ Jaxxjail 

quotas. 


4 JI 4 I j£j ^ujjJU j-a 10 & 5 &0 53o^ 

: RAID 0 :-Vj! 

bda A^.1 j ^jlA Igdd dn^sj (J^aau ^<a 0>a^ ^aJJ d n*sj ^)3^)jai]| 6 ^-^bowa jJ A j Vfill (J-qju 

duU laja. 500 ^-kiAJ ^.1 j <J£ tiLaJ^jU 2 ^' ic ' (jl£ 13] 
^ic. dlULnll ^jjd dua. dub l 1QQQ ^ ^ ^; ^.1 j c^L^pjlA AjI£ laj l_Sjoj j Ajli RAID 0 ^lAaduaj U^jl j 

^jU ^3c- (. kL jl Aldda dl ^$.1^ AJU. ^3 J A_Aj£J| j 6<vI^)3]1 A AaC- ^3 ^j^)joi pbl A ball I &3 a jt 

.AjVqlll c»3a ^3 A_nLai ^>^1 o'^&j u!^ *^1J 

RAID O 


Disk O 


Cl 


Cl J>| 

^Al^ 


^ A2 ^ 

^ A3 ^ 


^ A4 ^ 

^ A5 ^ 


^ A6 ^ 

^ A7 


^ A8 ^ 





Disk 1 
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4^ : RAID 1 - Mirror 

(J ijVl ^ CjUUj J (jl !^\ ^kVI ^jtg-ll (j-ft A 'N m 1 dlbjlgJl *1^.1 (JatA. Lbjl 4_lLa. ^ Jill 11a ^a^JjaaJ 

1 n^xtjj diULull Jmj (jl Ujli CjhjlgJl Jl^.1 j£Laui l$\ Cjj^. 4l\j± C-D2kJ ^bll ^jlg-11 ^ ^ L_fl jjuj 

^jlg-ll (j-G I^)j3 (J^XJjoi (Jj ^al JVlll L_fl3jJJ (jl j ^k^l Jjl*]! (j-G 
.20 C. alii I j^a CjUlnll ^k Ax. jjuill ^k JiLali ^ jill IjlA CjLjL^jI 

(jC- ^al jail I C flSjj I jJajj j >Vi ^ c> . 


CjULj jpa 4 ~sjoij < 


RAID 1 




Cb 3) 

^ A1 ^ 


^ A1 ^ 

^ A2 ^ 


^ A2 ^ 

^ A3 ^ 


^ A3 ^ 

^ A4 ^ 


^ A4^ 





Disk O 


Disk 1 


: RAID 5 : -feM 

(_^axj C-U^. (Js^I ^Ic. c^lxA 3 jkjfi (j* AjI C-Li^. A_i lc- ClAiLnll jl.lia3 (JL<U^I c Q* a ia £-<a (JjJaSl e-blj jj j ^ ^ill I.AA 

^II ^jc. cijLq^LlaII a r -<q ^aj parity «^_jj Ljajl ^ c^Lolp^Ia 2 cJ^I*^ dAjLull ^ic- 

^ jjj j djl£joiJ^ jlA 2 -laih jg )^j Lojjj ^Uajll ^gk jg JAjV AjI V] CLllUill c*LaLpjlgJl (_^ol£ c£LaiJj^lA A *sl j'N'sjj 

.jjLLudll jAjoij^jl^Jl J^Iaj jjac; J£jAjparity 

AJli ^-Lq A^.1 j (j\ L_alj aJL^. ^j c^LoLpjlA 2 ^jjJ ClAjloll ^^Ic. j ptal ^jill bA ^jjj La£ 

ciil£jaij^jlgJI ^^ parity cl^ 

RAID 5 



b'j: RAID 6 :- 

J j* j RAID 5 ^<a (_12a*j aJL^. djULnll (Jl (Ja ^j£i j 

Jl u' c?' Parity jU ^ Jl J^Vi ^j ls^ . 













































RAID 6 



vl>isk<£b m Disk 1 Disk 2 Disk 3 Disk 4 


: RAID 10 

Ajjii ^Ijjl qa jjc.jj (jjj j RAID (j* RAIDO + RAID1 

Jac ^ J-* <yj>4 f jsj l$jl Mirror t> Aa& ^Uaj <^Aj liLy jjU JS1 

cJsVl cs^ ^^^* ‘\i ''f ^ 4 Cjj& u' 


RAID 10 
RAID O 


RAID 1 RAID 1 



Simple volumes just like the primary or logical partition of basic disk. If there is only 
one dynamic disk, we can only create simple volume. A simple volume can be extended 
within the same disk or onto additional disks. If a simple volume is extended across 
multiple disks, it becomes a spanned volume. 

Spanned volumes consist of at lease two dynamic disks. The areas of unallocated space 
used to create spanned volumes can be different sizes. Spanned volumes are organized 
sequentially and are not fault tolerant. It also can be extended and mirrored. After a 
partition is extended, no portion of it can be deleted without deleting the entire spanned 
volumes. 

Striped volumes are composed of free space on two more disks, which is similar to 
spanned volumes. However, the difference is that stripped volumes can improve the 
writing and reading speed of data by adding data to all disks at the same time. A striped 
volume cannot be mirrored or extended and is not fault tolerant. 
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Mirrored volumes are also known as RAID 1. A mirrored volume is a fault-tolerant 
partition that stores an exact copy of data from another disk. Mirrored volumes need 
two disks; if one disk fails another can be unaffected and work normally. 

RAID-5 volumes require three disks at least. RAIDS is a combination of striped and 
mirrored volume. It is fault tolerant and has a high writing and reading speed of data. 
RAIDS volumes are available only on computers running server operating systems. 

From the introduction above, we may have a general understanding about dynamic disk 
and the five types of dynamic volumes. With a dynamic disk we can perform disk and 
partition management without restarting computer. 


deny security ^ allow jjji < Uja*aj 540" 


for folder permissions the Deny will be applied because windows execute the most restrictive 

permissions not care if it sharing permissions or security permissions 

(jjjfaTilA ^1 (jk IJjSj jiisSn 


AS jam j\ I j oiiVimi jl jIaj fUwVI j»Al jt j A ■ >»!«•*«■ ..i; gpo 


GPO group policy object is used to customize the permissions of users & computers in active 
directoryor deploy softwares & scripts over OUs ,so the admin can hide control panel for 
example or RUN window or anything to limit the user interface according to business needs 


jjIuia ( _ f ie ijj u ">j j 3I tlabljcl j\ regedite up- » J-p- ^ Mjjrdl 

(jjluia Lm3jI j £)±a iSS* maII ,_jjjamm {jls- Luajl ^ jSjjamII AawuIL Lai £)AuiLail <_jjIamm j - Iama u-ail 
jjaIuV (JmjamSjjam flillu.! jA uaJI A lajj l^jjjjla jft tiljV i jLaSfl ^Iaa£ 4jImaj ^£2 »j^aVI 

<LajlaUIj f^-AMflj i Lfj j Ljjfr 

jft\S . 'a,-.. uLLujallt jC Lai 

jJjj jjj jj*_a - iSl* a llj| j! MJIa. dljJtcp/ip jA jjAiAAt " A " £ma -l 

cmd jrun fbViinl jA ^maJaIamaII ^la -2 
partitions £* JaUjII jA ^jIIaaII jaa .3 
cd/usb ^I-isamm! jja .4 
homefolder -5 

desktop ji my document Jredirect && -6 

Lul ^Lj JZ (jUilfr AIacI ja » 1aa> maII jjjijLa JSj 















MBR vs. GPT Ga Jjil1U:56<_H 



1- Partition table (64byte) 

2- Magic No. (2byte) 

4- Boat loader (446byte) 


GPT = Guid Partition Table 

1. 128 cMj 


3. windows 8/7 

4. dlUlall fjlc. ialiail CjULu 

5. V windows xp 
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01143739545 <»/(* 


01158798352 




01150602491 





















